Vulnerability in LibreOffice - Security Update
Summary
DSA-3482-1: libreoffice - security update. Affects libreoffice versions < 1:3.5.4+dfsg2-0+deb7u6. Fixed in 1:3.5.4+dfsg2-0+deb7u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LibreOffice is a full-featured office productivity suite that provides various applications for word processing, spreadsheets, presentations, and more. It is widely used by individuals and organizations for creating and editing documents. However, a security vulnerability has been discovered in LibreOffice that affects its handling of Lotus WordPro files.
Vulnerability Detail
The vulnerability allows an attacker to exploit specially crafted Lotus WordPro files to crash the LibreOffice program or execute arbitrary code. This can lead to a denial of service or potential remote code execution on the affected system. The vulnerability was discovered by an anonymous contributor working with VeriSign iDefense Labs.
How To Fix
Minimum fixed version
1:3.5.4+dfsg2-0+deb7u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libreofficeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
It is crucial to upgrade your LibreOffice packages to the fixed versions mentioned above to mitigate the risk of exploitation. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libreoffice →
FAQ
LibreOffice is a full-featured office productivity suite that provides applications for word processing, spreadsheets, presentations, and more.
The vulnerability allows an attacker to crash the LibreOffice program or execute arbitrary code, potentially leading to a denial of service or remote code execution on the affected system.
The vulnerability was discovered by an anonymous contributor working with VeriSign iDefense Labs.
To fix this vulnerability, it is recommended to upgrade your LibreOffice packages to the latest available versions.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libreoffice.
